$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa File: f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa (raw, json) Hash identifier: iaK4Ezlj63BM+IPG4PcVNfflLoY3t2bCYisNlt4oGiE= Subject key identifier: 09:97:35:6E:3A:2E:29:DB:37:E2:70:BF:85:DF:EF:0C:5B:46:A9:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE2FBC44BA8D8231F92D76F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.36.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c4:4b:a8:d8:23:1f:92:d7:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=ecadb9cf-94e3-4d41-a290-159cba19f496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:fe:23:4a:a6:07:92:0a:1b:12:57:fa:90: 43:39:fb:d0:52:83:37:bb:1a:70:5e:ab:6d:53:fb: ea:d9:39:c8:4d:e8:38:4c:16:d7:4d:4d:00:0e:6b: ab:6b:35:17:76:ba:d2:4b:dd:96:d2:6e:84:93:e3: 53:cb:8e:bc:e6:31:5b:6a:fb:8c:5e:92:20:1b:f9: 18:3a:92:68:e6:84:43:41:1e:dd:e8:c1:8e:db:9c: 7c:ba:17:de:2b:d5:06:f3:2a:d9:65:98:14:8a:eb: cf:6b:36:73:7e:92:ab:c6:7a:44:02:eb:ab:c3:26: 21:70:78:2f:0f:c2:92:9f:df:d3:aa:0e:5c:96:fe: 26:1d:c2:51:a3:4c:49:70:52:df:06:3f:5f:ce:1d: 81:9b:7c:b1:4c:54:f2:3b:d9:97:ab:65:c0:fe:83: 05:63:f8:e3:ed:20:a4:2e:6b:50:5b:d5:cf:1b:8d: 50:b7:d0:16:b5:28:4b:12:26:39:b0:a3:bb:c8:ed: 4e:a4:73:7f:36:05:e1:9e:c5:ec:95:bb:2a:76:25: ac:ae:92:2c:5d:db:9e:b6:1f:a5:e0:f1:40:54:a7: 1e:58:0e:a2:dd:32:bb:43:8a:a1:05:18:1c:1d:77: 28:f5:46:08:30:c3:47:94:33:59:4c:8e:5e:12:b5: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:35:6E:3A:2E:29:DB:37:E2:70:BF:85:DF:EF:0C:5B:46:A9:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a5:5b:9e:b5:8d:df:07:92:55:f2:89:78:9c:e6:6b:83:36: a9:c1:a1:00:37:df:4b:54:57:14:87:17:5d:d4:a5:e5:1a:28: 11:fc:e6:aa:9a:59:57:49:d7:d5:60:11:ea:b2:94:0d:a8:c3: bd:48:83:2a:4f:cc:29:9c:aa:e4:53:0c:1d:54:5a:6c:03:39: a3:3e:b9:1c:fd:7c:47:12:89:0e:4a:5b:83:3f:c3:53:ff:54: 61:c6:64:ee:d6:28:62:b2:53:29:5b:36:4d:95:71:79:27:b4: ad:7a:21:a7:3f:0f:6f:e3:b1:66:58:12:63:f4:8c:f5:4d:4f: be:f6:19:ad:82:68:fe:d6:8c:33:24:62:fc:13:b4:21:f0:18: 65:b0:66:72:2e:61:0b:04:0a:5e:81:6d:12:4f:bd:62:ee:3f: 48:fc:64:6e:40:7c:36:a9:1d:d8:90:42:f6:76:15:6d:50:d0: 43:e4:29:fd:65:e6:84:d3:d2:a7:fb:bf:9a:21:f3:3d:73:e9: 05:ea:c2:82:9f:57:25:de:89:e9:ba:0a:33:2a:ea:b6:73:9c: 48:31:42:d4:3f:66:fe:14:6a:f7:15:e3:29:3e:d9:0f:a4:65: f0:e5:6f:28:d5:e4:1d:f4:a3:e6:75:5f:ff:cf:30:e9:7f:e7: e7:6e:77:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8RLqNgjH5LXbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk ZWNhZGI5Y2YtOTRlMy00ZDQxLWEyOTAtMTU5Y2JhMTlmNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirn+I0qmB5IKGxJX+pBDOfvQUoM3uxpwXqtt U/vq2TnITeg4TBbXTU0ADmurazUXdrrSS92W0m6Ek+NTy4685jFbavuMXpIgG/kY OpJo5oRDQR7d6MGO25x8uhfeK9UG8yrZZZgUiuvPazZzfpKrxnpEAuurwyYhcHgv D8KSn9/Tqg5clv4mHcJRo0xJcFLfBj9fzh2Bm3yxTFTyO9mXq2XA/oMFY/jj7SCk LmtQW9XPG41Qt9AWtShLEiY5sKO7yO1OpHN/NgXhnsXslbsqdiWsrpIsXdueth+l 4PFAVKceWA6i3TK7Q4qhBRgcHXco9UYIMMNHlDNZTI5eErXjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmXNW46LinbN+Jwv4Xf7wxbRqmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjYxYzg3OTctNDBlZi0z YjhhLWI2YTEtZDMwZjk2MDRhYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABalW561jd8HklXyiXic5muDNqnBoQA330tUVxSHF13UpeUaKBH85qqa WVdJ19VgEeqylA2ow71IgypPzCmcquRTDB1UWmwDOaM+uRz9fEcSiQ5KW4M/w1P/ VGHGZO7WKGKyUylbNk2VcXkntK16Iac/D2/jsWZYEmP0jPVNT772Ga2CaP7WjDMk YvwTtCHwGGWwZnIuYQsECl6BbRJPvWLuP0j8ZG5AfDapHdiQQvZ2FW1Q0EPkKf1l 5oTT0qf7v5oh8z1z6QXqwoKfVyXeiem6CjMq6rZznEgxQtQ/Zv4UavcV4yk+2Q+k ZfDlbyjV5B30o+Z1X//PMOl/5+dud6Y= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:38 2025 by rpki-client